$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer File: 8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer (raw, json) Hash identifier: 1BOTTUnB2yodJejFTF9iVeXlb6vDBWZFaZD6cPKrlIM= Subject key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 317F9BAF81EBB464A370BAC97F200D9AB19F7671 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft caRepository: rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 13 Mar 2026 15:05:52 +0000 Certificate not after: Fri 12 Mar 2027 15:10:52 +0000 Subordinate resources: AS: 263563 IP: 168.232.180.0/22 IP: 177.22.184.0/22 IP: 2804:f08::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Mar 2026 00:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7f:9b:af:81:eb:b4:64:a3:70:ba:c9:7f:20:0d:9a:b1:9f:76:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 13 15:05:52 2026 GMT Not After : Mar 12 15:10:52 2027 GMT Subject: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:a4:db:ce:52:aa:e5:99:e9:e9:11:e4:64: 00:f2:ce:31:34:3c:b6:e5:e8:da:6d:73:24:a9:d0: f5:86:a1:57:5e:46:e2:9d:32:a4:26:f4:a9:6e:7c: b9:f6:ae:f7:51:57:a4:c3:64:ea:96:af:e0:9c:9f: c2:34:f8:21:f7:b2:79:4b:df:6a:b7:6e:b0:02:ac: 79:8a:ba:e1:9a:09:4a:8e:8c:02:35:10:8b:8e:12: d3:2e:4e:5d:56:86:46:e5:c0:34:31:4a:6b:cb:ae: 27:b7:7e:96:f2:17:0c:54:5d:ed:1c:0c:6a:19:75: e2:3d:d8:16:06:7b:d5:67:2b:b4:38:0e:7a:15:9f: 44:f5:18:d0:84:38:86:e5:7e:a3:a3:d2:e5:ca:ca: ae:b1:b9:3d:13:91:90:33:b8:a9:66:d5:58:2f:12: af:c9:d1:e7:36:ef:68:f6:6b:2c:a8:9c:aa:1e:26: 71:99:05:d2:37:77:2b:6f:cc:0d:4d:38:20:21:21: d1:5c:02:0f:a0:3a:2c:ca:5c:25:09:5d:1d:de:f0: 90:f1:fe:da:fe:8e:30:8a:ce:98:9f:4b:04:c5:12: 7a:17:c6:84:27:b0:20:b8:98:54:22:ea:0b:3c:41: d7:4b:bf:6a:e2:b0:1f:de:79:e3:b2:9a:b4:86:4c: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.180.0/22 177.22.184.0/22 IPv6: 2804:f08::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263563 Signature Algorithm: sha256WithRSAEncryption bd:c9:66:73:0a:0b:eb:0a:b2:b0:1b:5b:43:92:fa:0b:85:69: a7:57:13:3e:c2:f9:04:06:65:40:6d:8f:71:4d:86:c3:a0:d4: c1:5c:e9:ae:ec:37:5f:b8:9b:59:fb:66:f8:cb:46:e9:6e:82: 50:01:ae:3b:35:db:55:b0:2d:81:f6:42:7d:55:3d:b5:3a:9d: 91:4f:d5:ed:2f:8e:cc:b2:75:31:2d:b3:63:44:cd:9a:76:ce: 18:c7:53:f8:4f:66:63:2e:08:ad:9e:f2:92:24:17:c0:ca:d1: 6c:eb:e7:11:bc:8b:88:32:d6:86:83:03:50:d0:0e:52:be:43: c7:3f:1c:dc:8b:32:b3:9d:27:64:b5:2d:b1:64:b0:38:51:4c: 46:e9:78:56:39:63:b7:1f:08:19:a1:3b:6f:44:72:41:39:09: f1:70:95:a1:ed:07:51:40:7d:fb:5b:97:40:0a:e9:a0:3c:db: 1a:de:82:20:d9:3c:97:d5:e1:6a:7f:18:68:ab:62:59:04:ae: 4d:d7:8f:86:cb:d8:46:e9:41:f9:a4:fc:59:fa:82:5b:86:fa: 94:08:7a:99:c6:f4:5c:1e:41:09:12:85:25:4a:b0:74:39:6d: a8:b1:d2:2f:45:ce:18:7b:55:e4:2c:a5:e5:e1:06:90:ed:d7: 22:1e:5e:c6 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUMX+br4HrtGSjcLrJfyANmrGfdnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAzMTMxNTA1NTJaFw0yNzAzMTIxNTEwNTJaMDMxMTAvBgNV BAMTKDhFQUU4RDFBRTZBNjg2OUNGRTU0RTM3NDIwMUE1NEYyRTA5MzRFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChFKTbzlKq5Znp6RHkZADyzjE0 PLbl6NptcySp0PWGoVdeRuKdMqQm9KlufLn2rvdRV6TDZOqWr+Ccn8I0+CH3snlL 32q3brACrHmKuuGaCUqOjAI1EIuOEtMuTl1WhkblwDQxSmvLrie3fpbyFwxUXe0c DGoZdeI92BYGe9VnK7Q4DnoVn0T1GNCEOIblfqOj0uXKyq6xuT0TkZAzuKlm1Vgv Eq/J0ec272j2ayyonKoeJnGZBdI3dytvzA1NOCAhIdFcAg+gOizKXCUJXR3e8JDx /tr+jjCKzpifSwTFEnoXxoQnsCC4mFQi6gs8QddLv2risB/eeeOymrSGTH4fAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOro0a5qaGnP5U 43QgGlTy4JNOxzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFNN dm1zcTFhZXY4QzEzdnJuNWRVMXBMekdwMXdHRkJuemdtTkpqOHNXNkovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRT TXZtc3ExYWV2OEMxM3ZybjVkVTFwTHpHcDF3R0ZCbnpnbU5KajhzVzZKLzEvOEVB RThEMUFFNkE2ODY5Q0ZFNTRFMzc0MjAxQTU0RjJFMDkzNEVDNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqOi0AwQCsRa4MA0EAgACMAcDBQAoBA8IMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFizANBgkqhkiG9w0BAQsFAAOCAQEAvclmcwoL 6wqysBtbQ5L6C4Vpp1cTPsL5BAZlQG2PcU2Gw6DUwVzpruw3X7ibWftm+MtG6W6C UAGuOzXbVbAtgfZCfVU9tTqdkU/V7S+OzLJ1MS2zY0TNmnbOGMdT+E9mYy4IrZ7y kiQXwMrRbOvnEbyLiDLWhoMDUNAOUr5Dxz8c3Isys50nZLUtsWSwOFFMRul4Vjlj tx8IGaE7b0RyQTkJ8XCVoe0HUUB9+1uXQArpoDzbGt6CINk8l9Xhan8YaKtiWQSu TdePhsvYRulB+aT8WfqCW4b6lAh6mcb0XB5BCRKFJUqwdDltqLHSL0XOGHtV5Cyl 5eEGkO3XIh5exg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:53:03 2026 by rpki-client